Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

flatcar-install: update public key #25

Merged
merged 1 commit into from
Sep 2, 2020
Merged

flatcar-install: update public key #25

merged 1 commit into from
Sep 2, 2020

Conversation

pothos
Copy link
Member

@pothos pothos commented Aug 31, 2020

The current subkey will expire soon and a new one was generated.

How to use

Run flatcar-install for a version signed with the new subkey.

Testing done

None

@pothos
flatcar-install: update public key
23f80e9 
The current subkey will expire soon and a new one was generated.
@pothos pothos requested a review from a team August 31, 2020 11:05
@vbatts
Copy link
Member

vbatts commented Sep 1, 2020

👍
Future: we need to revisit this workflow, so it's based more on trusting the public key of the root key, than the expiration of the subkeys. But for now at least we're rotating this before it expires. And this only would affect the install script key, not the update-signing key.

t-lo
t-lo approved these changes Sep 2, 2020
View reviewed changes
Copy link
Member

@t-lo t-lo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you!

@t-lo t-lo merged commit b5a5bcc into flatcar-master Sep 2, 2020
@t-lo t-lo deleted the kai/update-subkey branch September 2, 2020 08:56
@t-lo t-lo mentioned this pull request Sep 2, 2020
Merged
pothos added a commit to flatcar-archive/coreos-overlay that referenced this pull request Sep 14, 2020
@pothos
coreos-base/coreos-init: Update to new version
dddfaf9 
This pulls in the new sub key for flatcar-install
flatcar/init#25
and a networkd unit to exclude Weave interfaces from DHCP
flatcar/init#22
and an update to two other networkd units which lacked a match section
that is mandatory in future systemd versions
flatcar/init#23
@pothos pothos mentioned this pull request Sep 14, 2020
Merged
pothos added a commit that referenced this pull request Sep 14, 2020
@pothos
Merge pull request #25 from flatcar-linux/init
17d9a2b 
flatcar-install: update public key by pothos
pothos added a commit to flatcar-archive/coreos-overlay that referenced this pull request Sep 14, 2020
@pothos
coreos-base/coreos-init: Update to new version
3d4973d 
This pulls in the new sub key for flatcar-install
flatcar/init#25
picked to a new flatcar-2512 branch in the "init" repository.
jepio pushed a commit that referenced this pull request Feb 21, 2022
@pothos
Merge pull request #25 from kinvolk/kai/verity-hash-offset
d5bd238 
dracut: fall back to expected dm-verity hash offset
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@t-lo t-lo t-lo approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@pothos @vbatts @t-lo